CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 01:04.

Filters

1 actief

Reset filters

Zoeken: VDE-2026-003

Zoeken

Leverancier

Protocol

Sector

Ernst

Bron

1 advisories gevonden

VDE-2026-003

Endress+Hauser: Multiple products prone to multiple vulnerabilities in e!Runtime and CODESYS V3 Runtime

Endress+Hauser — CC 100

Endress+Hauser PSIRThoog

Gepubliceerd

31 maart 2026

Laatste update

1 april 2026

Gekoppelde CVE's

CVE-2022-47378 CVE-2022-47379 CVE-2022-47380 CVE-2022-47381 CVE-2022-47382 CVE-2022-47383 CVE-2022-47384 CVE-2022-47385 CVE-2022-47387 CVE-2022-47388 CVE-2022-47389 CVE-2022-47390 CVE-2022-47391 CVE-2022-47392 CVE-2022-47393

Getroffen sectoren

Risk evaluation

Multiple Endress+Hauser devices are prone to vulnerabilities found in e!Runtime and the CODESYS V3 framework.

Mitigatiesamenvatting

The CDC 90 device is not designed for network connectivity by default. Since it is not connected to a network, the vulnerabilities cannot be exploited. However, if the customer chooses to connect the device to a network, the default firewall settings should be maintained, as this will mitigate the security vulnerabilities. For the CC 100 and PFC 200 devices, ensure that the default firewall settings remain intact and that both PLC Runtime and PLC WebVisu are disabled. This configuration effectively mitigates the identified security vulnerabilities.

Revisiegeschiedenis (2)

Initiële publicatie — 31 maart 2026
Initial version
Update A — 1 april 2026
Edited a typo in product tree.

Officiële bron: Endress+Hauser PSIRT